Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My computer wont boot, Keeps restarting


  • This topic is locked This topic is locked
11 replies to this topic

#1 hiallimdaz

hiallimdaz

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:06:10 PM

Posted 14 April 2010 - 03:17 PM

I had the XP Smart Security 2010 virus and I turned off my computer, when i tried to reboot the computer kept restarting while the windows xp screen is up.

I dont know what to do i cant get on to my pc to even fix this thing !

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:10 PM

Posted 14 April 2010 - 03:25 PM

Can you boot into safe mode by hitting F8 just after the BIOS Posts the RAM checks and other things?

#3 hiallimdaz

hiallimdaz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:06:10 PM

Posted 14 April 2010 - 03:42 PM

It still restarts even when in safe mode, it happens a second after the windows xp screen loads, shows a blue screen with writing i cant read because its only there for about half a second


#4 Guest_Joe C_*

Guest_Joe C_*

  • Guests
  • OFFLINE
  •  

Posted 14 April 2010 - 04:01 PM

Boot using your winxp cd.
Enter recovery console.
at the command prompt go to

C:/windows/system32

next type:
Dir *.exe

If you find, it, type

copy userinit.exe wsaupdater.exe

Exit and reboot normally. You should now be able to logon.

Run regedit

Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

In the right pane, you should see

C:\WINDOWS\System32\wsaupdater.exe,

Change it so that it reads:

C:\WINDOWS\System32\userinit.exe,

That should solve the problem, if the malware was the one that caused the issue.


#5 hiallimdaz

hiallimdaz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland

Posted 14 April 2010 - 04:08 PM

Thanks Joe I'll try what you said, I've lost my windows xp CD though and will need to get one.


#6 Guest_Joe C_*

Guest_Joe C_*

  • Guests
  • OFFLINE
  •  

Posted 14 April 2010 - 05:14 PM

you can use a bartPE cd and repair the userinit file, that should get you logged back into your pc


QUOTE
You can use offline registry editor .For that you would need Bart PE Bootable CD

For Detailed instruction How to create the cd and to download the Preinstalled environment File check the following link

http://www.nu2.nu/pebuilder/start/

Once you have created the CD

1 Insert the BartPE CD into the drive, and boot the system from the CD. Once the file loading phase is over the Bart PE desktop will be visible

2 Type Regedit.exe in the prompt, and press Enter. Select the HKEY_USERS hive

3 From the File menu, choose the Load Hive option. Browse to your Windows installation drive for example the following location:
C:\Windows\System32\Config\

4 Select the file named SOFTWARE (the file without any extensions), and click Open

5 Type a name for the hive (in load hive box )that you've loaded now. (Example: MyXPHive)

6 Now the SOFTWARE hive is loaded, and present under the HKEY_USERS base hive

7 In order to fix the Userinit value in the loaded hive, navigate to the following location:

HKEY_USERS \ MyXPHive \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon

8 Double-click Userinit and set it's value correctly. Example: Set it's data as follows :
C:\Windows\System32\Userinit.exe,

Include the trailing comma also This is assuming C drive is system partition and contains the system32 folder and userint.exe file

9 After entering the correct data you MUST unload the Hive. To do so, select MyXPHive branch, and then in the File menu, choose Unload Hive. It's important that you must select the MyXPHive branch first before unloading it

10 Quit BartPE and restart Windows

http://www.mcmcse.com/forums/viewtopic.php...vote=viewresult

Edited by Joe C, 14 April 2010 - 07:02 PM.


#7 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:06:10 PM

Posted 14 April 2010 - 06:54 PM

You can also build your own Recovery Console CD using this tool.

Edited by elise025, 15 April 2010 - 02:00 AM.
Topic moved from XP forum to Am I Infected ~ Elise


#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania

Posted 15 April 2010 - 04:19 AM

Do you get a Blue Screen or do you have a logon/logoff loop. There is a major difference between the two. If you have a blue screen and you don't get any further than the XP splash screen, the steps posted above will NOT work.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#9 hiallimdaz

hiallimdaz
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:10:10 AM

Posted 15 April 2010 - 06:26 PM

I get a blue screen as soon as the windows screen tries to load but its only there for half a second.

Edited by hiallimdaz, 15 April 2010 - 06:35 PM.


#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:08:10 PM

Posted 16 April 2010 - 01:55 AM

Okay, in that case, all the above steps will not work. I will move this topic to the appropriate forum.

OK this file is big Print these instruction out so that you know what you are doing

Two programs to download

First

ISOBurner this will allow you to burn OTLPE ISO to a cd and make it bootable. Just install the program, from there on in it is fairly automatic. Instructions

Second
  • Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to Use Safelist
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:06:10 PM

Posted 26 April 2010 - 02:11 PM

Hello, are you still there?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:08:10 PM

Posted 04 May 2010 - 10:40 AM

Due to lack of feedback, this topic is now closed.

If you are the original topic starter and you need this topic reopened, please send me a PM.

Everyone else, please start a new topic.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users